Skip to content

Known vulnerabilities in SonicWall SonicOS

Is your version affected?

CVE Summary Score Published
CVE-2022-22274 A Stack-based buffer overflow vulnerability in the SonicOS via HTTP request allows a remote unauthenticated attacker… Not rated Mar 25, 2022
CVE-2021-20048 A Stack-based buffer overflow in the SonicOS SessionID HTTP response header allows a remote authenticated attacker to… Not rated Jan 7, 2022
CVE-2021-20046 A Stack-based buffer overflow in the SonicOS HTTP Content-Length response header allows a remote authenticated… Not rated Jan 7, 2022
CVE-2021-20031 A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall… Not rated Oct 12, 2021
CVE-2021-20019 A vulnerability in SonicOS where the HTTP server response leaks partial memory by sending a crafted HTTP request, this… Not rated Jun 23, 2021
CVE-2021-20027 A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a… Not rated Jun 14, 2021
CVE-2020-5143 SonicOS SSLVPN login page allows a remote unauthenticated attacker to perform firewall management administrator username… Not rated Oct 12, 2020
CVE-2020-5142 A stored cross-site scripting (XSS) vulnerability exists in the SonicOS SSLVPN web interface Not rated Oct 12, 2020
CVE-2020-5141 A vulnerability in SonicOS allows a remote unauthenticated attacker to brute force Virtual Assist ticket ID in the… Not rated Oct 12, 2020
CVE-2020-5140 A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS) on the firewall… Not rated Oct 12, 2020
CVE-2020-5139 A vulnerability in SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS)… Not rated Oct 12, 2020
CVE-2020-5138 A Heap Overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS)… Not rated Oct 12, 2020
CVE-2020-5137 A buffer overflow vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS)… Not rated Oct 12, 2020
CVE-2020-5136 A buffer overflow vulnerability in SonicOS allows an authenticated attacker to cause Denial of Service (DoS) in the… Not rated Oct 12, 2020
CVE-2020-5134 A vulnerability in SonicOS allows an authenticated attacker to cause out-of-bound invalid file reference leads to a… Not rated Oct 12, 2020
CVE-2020-5135 Exploited SonicWall SonicOS Buffer Overflow Vulnerability 9.8 Critical Oct 12, 2020
CVE-2020-5133 A vulnerability in SonicOS allows a remote unauthenticated attacker to cause Denial of Service due to buffer overflow,… Not rated Oct 12, 2020
CVE-2020-5132 SonicWall SSL-VPN products and SonicWall firewall SSL-VPN feature misconfiguration leads to possible DNS flaw known as… Not rated Sep 30, 2020
CVE-2020-5130 SonicOS SSLVPN LDAP login request allows remote attackers to cause external service interaction (DNS) due to improper… Not rated Jul 17, 2020
CVE-2019-7479 A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode Not rated Dec 31, 2019
CVE-2019-7487 Installation of the SonicOS SSLVPN NACagent 3.5 on the Windows operating system, an autorun value is created does not… Not rated Dec 19, 2019
CVE-2019-7477 A vulnerability in SonicWall SonicOS and SonicOSv TLS CBC Cipher allow remote attackers to obtain sensitive plaintext… Not rated Apr 2, 2019
CVE-2019-7475 A vulnerability in SonicWall SonicOS and SonicOSv with management enabled system on specific configuration allow… Not rated Apr 2, 2019
CVE-2019-7474 A vulnerability in SonicWall SonicOS and SonicOSv, allow authenticated read-only admin to leave the firewall in an… Not rated Apr 2, 2019
CVE-2018-9867 In SonicWall SonicOS, administrators without full permissions can download imported certificates Not rated Feb 19, 2019

Other SonicWall products